What's new

What each version of the extension added, newest first.

What's new — extension 0.8.3

The Chrome Web Store serves 0.4.6 (approved 3 September 2026). The next package, 0.8.3, was built on 24 September 2026. It carries everything since 0.4.6 (0.5.0 was refused over the privacy policy — fixed the same day; 0.8.2 was refused because its store summary listed products this extension does not cover — rewritten for 0.8.3; 0.6.0, 0.7.0, 0.8.0 and 0.8.1 were never uploaded). Until a store approves it, the store keeps serving 0.4.6. What each version added:

  • 0.8.3 (24 September 2026). The store summary and description say what this extension does, in one sentence and in prose. No code, permission or data change.
  • 0.8.2 (22 September 2026, refused by the Chrome Web Store). A deep scan started from the blocked page shows its progress step by step — which step, how far, and about how long is left — and states its price in credits before you start it; nothing is charged unless you accept that price. An allowlist line or campaign entry naming an AI-agent skill or plugin is read as one. No new permission, no new host, nothing new sent.
  • 0.8.1 (21 September 2026, never uploaded). A new name in the stores, "RepoGates — AI Supply Chain Security for Developers", with a summary that names the six sources it checks. Nothing else changes: no new permission, no new host, nothing new sent.
  • 0.8.0 (20 September 2026). The security ticker's WATCHING line names six platforms — GitHub, Hugging Face, VS Code Marketplace, Docker Desktop, GitLab and AI-agent skills — with the campaigns active on each, "quiet" stated when there are none, and a link to each platform's intelligence page. The board and the download gate stay on github.com, huggingface.co and gitlab.com; VS Code extensions, Docker Desktop extensions and agent skills are assessed through the MCP server and the Claude Code plugin. The cross-host "Contagious Interview" campaign joins the ticker. New store title and summary. Privacy notice version 4 (Hugging Face and gitlab.com), shown once after the update.
  • 0.7.0 (20 September 2026). gitlab.com: the trust board on a project page (the 22 checks; what gitlab.com withholds from an anonymous caller is listed as not checked) and the download gate on the Download button's archive, raw files and release assets. A self-managed GitLab on another hostname is not covered. Ticker titles name their marketplace when the page is another. The privacy policy names the sub-processors and carries the Limited Use disclosure.
  • 0.6.0 (13 September 2026). huggingface.co: the trust board on a model, dataset or Space page (18 checks — the Hub's own malware and pickle-import scans, pickle-only weights, custom code loaded on import) and the download gate on a weight file.
  • 0.5.0 (10 September 2026). The four dimension verdicts on the board — open, clone, install and run, hand to an AI agent — and the delta since the previous assessment ("down 6 since 3 Sep") with what changed; assessments kept 180 days.
  • 0.4.6 (2 September 2026) — the store's version. The board says which account it spends from; the deep-scan option and its progress survive a service-worker restart; a repository nobody could check has no score.

The full list, version by version, is extension/CHANGELOG.md in the repository; the store package is built from the same source.

What it does not see. RepoGates gates downloads made through the browser. It does not see git clone, package managers or curl — outside Claude Code with the RepoGates plugin, whose hook refuses a clone or install that names a blocked repository on the command line, before it runs. The hook sees Bash tool calls in that one client and nothing else. VS Code and Docker Desktop extensions and agent skills are answered through the MCP server and the plugin, not in the browser.